{
  "name": "jwt.decode",
  "group": "crypto",
  "summary": "Decode a JWT and check its expiry, optionally verifying an HMAC signature.",
  "description": "Splits a JSON Web Token, decodes header and payload, and converts every standard time claim (exp, iat, nbf, auth_time) into readable dates with a live expiry verdict. Supply `secret` to verify an HS256/384/512 signature. Decoding never validates trust on its own — an unverified token is just base64 text that anyone can forge.",
  "keywords": [
    "jwt",
    "json web token",
    "decode token",
    "jwt expired",
    "bearer token",
    "hs256",
    "claims"
  ],
  "endpoint": "https://fluentedi.com/v1/jwt/decode",
  "mcp_name": "jwt_decode",
  "makes_network_request": false,
  "parameters": {
    "type": "object",
    "properties": {
      "token": {
        "description": "The JWT (three base64url segments separated by dots). A leading \"Bearer \" is ignored.",
        "type": "string",
        "maxLength": 100000
      },
      "secret": {
        "description": "HMAC secret. When provided, the signature is verified for HS256/HS384/HS512.",
        "type": "string",
        "default": "",
        "maxLength": 4096
      }
    },
    "required": [
      "token"
    ],
    "additionalProperties": false
  },
  "examples": [
    {
      "description": "Inspect a token's claims and expiry",
      "url": "https://fluentedi.com/v1/jwt/decode?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c",
      "args": {
        "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
      }
    }
  ],
  "suggestion": null
}